A probably paranoid Golang utility library for securely hashing and encrypting passwords based on the Dropbox method. This implementation uses Blake2b, Scrypt and XSalsa20-Poly1305 (via NaCl SecretBox) to create secure password hashes that are also encrypted using a master passphrase.
- golang
- golang-library
- scrypt
- password-hash
Comprehensive security for Lucky framework
Gulp.js command execution for humans
- gulp
- execa
- gulp-plugin
- gulpjs
Password generator written in Golang, usable as a CLI or Go library. Provides options for human readable and accessibility friendly passwords.
- golang
- go
- go-library
- golang-library
Security training for the apps you actually ship. Open your browser and start hacking.
A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability.
A tool to assist IoT developers in securing MQTT-based IoT deployments
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
Cloverleaf is a free, open source app to replace your password manager without storing your passwords anywhere.
🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.
POMjs is a random password generator in HTML and pure Javascript with no cookies and no trackers. It has been translated into several languages.
Bash and Python Honeyport scripts
Want to crack passwords faster by using a wordlist that fits your 'target audience'? Use WikiRaider.
- wordlist
- wikipedia
- dictionary
- attack
Forensic tool for acquisition, triage and analysis of remote block devices via iSCSI protocol.
Advanced Phishing Protection: Suricata rulesets open and free
- anti-phishing
- antiphishing
- openphish
- phishing
Cumulus. Threat modeling the Clouds.
- card-game
- cornucopia
- elevation-of-privilege
- eop
Android Malware Behavior Deleter
Rule Processor Y is a next-gen Rule processor with complex multibyte character support built to support Hashcat
A tool designed for consistent and safe capture of off network web resources.
XSSMaze is a web service designed to test and improve the performance of security testing tools by providing various cases of XSS vulnerabilities.
Local-first policy gateway for coding agents. Allow, review, or block MCP, shell, SQL, GitHub, and HTTP actions with scoped credentials and signed evidence.
Practical security policy enforcement for Android apps via bytecode rewriting and in-place reference monitor
🕵️♀️ Find, locate, and query files for ops and security experts ⚡️⚡️⚡️
Low interaction MySQL honeypot written in C